rp_python_sdk 0.10.0__tar.gz → 0.11.0__tar.gz

{rp_python_sdk-0.10.0 → rp_python_sdk-0.11.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: rp_python_sdk
-Version: 0.10.0
+Version: 0.11.0
 Summary: Python SDK for Relying Parties to enable simple integration with the Digital Identity ecosystem
 License: Proprietary
 Author: Erik Pragt
@@ -426,6 +426,9 @@ poetry publish
 
 ## Release Notes
 
+### 0.11.0 (Nov 29, 2024)
+- Update to use Authorisation Server issuer attribute as `aud` value when retrieving tokens.
+
 ### 0.10.0 (Oct 24, 2024)
 - JWT signature verification for id_token in the retrieve_tokens step.
 

{rp_python_sdk-0.10.0 → rp_python_sdk-0.11.0}/README.md

@@ -407,6 +407,9 @@ poetry publish
 
 ## Release Notes
 
+### 0.11.0 (Nov 29, 2024)
+- Update to use Authorisation Server issuer attribute as `aud` value when retrieving tokens.
+
 ### 0.10.0 (Oct 24, 2024)
 - JWT signature verification for id_token in the retrieve_tokens step.
 

{rp_python_sdk-0.10.0 → rp_python_sdk-0.11.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "rp_python_sdk"
-version = "0.10.0"
+version = "0.11.0"
 description = "Python SDK for Relying Parties to enable simple integration with the Digital Identity ecosystem"
 authors = ["Erik Pragt <erik.pragt@connectid.com.au>"]
 license = "Proprietary"

{rp_python_sdk-0.10.0 → rp_python_sdk-0.11.0}/rp_python_sdk/endpoints/retrieve_tokens.py

@@ -40,15 +40,16 @@ def retrieve_tokens(config: SdkConfig, authorisation_server_id: str, callback_bo
         f"{authorisation_server.customer_friendly_name}, x-fapi-interaction-id: {x_fapi_interaction_id}")
 
     token_endpoint = issuer_metadata.get_preferred_token_endpoint()
+    issuer = issuer_metadata.issuer
 
     if callback_body.state != original_state:
         raise RelyingPartyClientSdkException(
             f"Callback response state value does not match state, callback state: {callback_body.state}, "
             f"state {original_state}, x-fapi-interaction-id: {x_fapi_interaction_id}")
 
-    if callback_body.iss != issuer_metadata.issuer:
+    if callback_body.iss != issuer:
         raise RelyingPartyClientSdkException(
-            f"iss mismatch, expected {issuer_metadata.issuer} , got: {callback_body.iss}")
+            f"iss mismatch, expected {issuer}, got: {callback_body.iss}")
 
     redirect_uri = config.application_redirect_uri
     client_id = config.client_id
@@ -59,7 +60,7 @@ def retrieve_tokens(config: SdkConfig, authorisation_server_id: str, callback_bo
 
     client_assertion_payload = {
         'sub': client_id,
-        'aud': token_endpoint,
+        'aud': issuer,
         'iss': client_id,
         'exp': exp,
         'jti': jti,